Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
File:                     _ESm2CkBQzmKHfvvhvwdrjRBoro.mft (raw, json)
Hash identifier:          5JmAkQg8GrIx3NkCB83rWOWHOJkuKpyiOO+Yk2+Qy/8=
Subject key identifier:   FE:C1:18:CD:41:D6:DE:02:B4:3B:04:44:03:BE:D4:49:03:CA:0F:75
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Certificate issuer:       /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial:       01E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
Manifest number:          01E1
Signing time:             Sat 10 May 2025 04:20:32 +0000
Manifest this update:     Sat 10 May 2025 04:20:32 +0000
Manifest next update:     Mon 12 May 2025 04:20:32 +0000
Files and hashes:         1: _ESm2CkBQzmKHfvvhvwdrjRBoro.crl (hash: z4IyBuqvayZj/xYLNin0YRw+wAeyhD4RVbfuhsXXZk8=)
                          2: E39F7394D71F11EFBDA86D9C762E951A.roa (hash: UaFjuj4h6iiPJ7i8a3Sfc3NzxnTj31aeIAuUOtd9TMg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Validity
            Not Before: May 10 04:20:32 2025 GMT
            Not After : May 12 04:20:32 2025 GMT
        Subject: CN=681ed410-adde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:34:69:ff:fe:67:39:0b:c8:99:a3:12:e3:
                    d4:64:b5:d8:0d:59:1d:23:2c:82:4c:24:94:8e:aa:
                    20:63:83:0e:f9:96:8c:c3:d2:e4:3c:85:ff:be:b0:
                    4c:f3:d4:11:65:e0:9c:f9:03:e9:d4:bb:ee:f8:49:
                    85:73:f5:3a:04:83:54:60:2f:16:cb:ad:c1:ac:6f:
                    4f:c6:74:4d:d8:18:4a:71:7e:27:b2:38:d6:92:08:
                    d6:36:4c:7a:82:09:b0:fb:9b:1a:02:c7:42:a7:e8:
                    bc:ef:2e:47:64:e8:a9:51:bd:fa:1a:43:fc:ab:a9:
                    95:da:05:bf:b8:5c:2f:9b:3e:91:3e:20:af:f1:66:
                    8b:a9:b5:e8:2b:5d:2d:ac:ed:8b:80:94:d3:58:ae:
                    d2:dd:21:cd:27:cb:f9:c5:fe:3b:02:af:4c:fa:d0:
                    3e:e4:ca:31:df:4f:11:32:6c:56:9e:c8:8b:24:a8:
                    39:8d:82:91:0c:0a:34:f8:bb:63:d9:36:37:a9:19:
                    98:4b:b9:12:65:4b:f3:c9:93:e8:04:d1:d7:d8:ab:
                    81:05:75:49:0b:09:d6:b6:64:58:bd:2d:41:75:c2:
                    a1:75:f0:44:22:a2:15:b5:0c:9b:f7:bc:fa:c4:05:
                    e7:bb:b5:ca:0a:24:fd:22:2e:89:f1:b7:f6:78:42:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C1:18:CD:41:D6:DE:02:B4:3B:04:44:03:BE:D4:49:03:CA:0F:75
            X509v3 Authority Key Identifier:
                keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:90:fa:15:33:86:25:aa:ff:7e:af:6e:2a:2f:54:4b:9f:e1:
         f7:a8:df:41:72:7f:2a:a1:fd:58:f0:02:b9:2d:aa:90:1e:ce:
         75:b5:c0:de:79:7e:a8:d9:5a:0a:e2:6c:b1:77:ca:95:a3:c9:
         f6:e4:a0:f9:f4:18:a3:8b:b0:89:e0:bb:c1:59:73:15:07:23:
         35:f5:ab:cd:92:fc:ab:84:43:c3:82:15:e5:99:e6:0c:cd:50:
         e3:75:9f:7f:76:60:34:dc:0e:68:5d:fa:74:fe:b6:e3:7e:34:
         fb:5d:c8:8e:cf:1b:c5:ba:c7:b6:16:9c:3e:64:3c:5b:71:80:
         8a:e1:00:cc:64:63:38:1c:4d:cf:bf:ec:d4:c5:eb:7b:88:32:
         66:ea:d1:c3:6a:e9:b7:11:ad:a0:d3:cd:ec:bd:45:a9:24:5e:
         1f:4f:73:e2:7a:5f:e9:71:4c:bf:b8:11:78:4e:53:4d:58:1b:
         fc:a9:08:07:fb:e5:29:ea:cf:3c:99:56:39:44:74:57:54:a6:
         1c:7c:1d:ef:74:8d:cb:8a:41:9a:bd:a9:fd:13:fb:9a:71:6f:
         ef:dd:63:28:93:a5:da:be:82:6c:29:74:13:f9:0c:b8:a1:11:
         7a:56:17:83:99:b7:0a:94:da:d4:50:f8:0a:5b:c0:c4:52:7d:
         4b:d7:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:54:59 2025 by rpki-client